$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/1d45399d-9ebd-3de3-9494-ccd7005e822f.roa File: 1d45399d-9ebd-3de3-9494-ccd7005e822f.roa (raw, json) Hash identifier: kKINxSfdaBbP88mXrs6qIdM/OgcGzfv+HQy7krvvAEU= Subject key identifier: 0B:36:AB:4F:38:CA:87:73:95:A6:0E:FD:5B:F2:C5:16:05:B1:17:A9 Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928 Certificate serial: 010D0C9F4328584D2A74F9A7861F5142AEB5BA80 Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/1d45399d-9ebd-3de3-9494-ccd7005e822f.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 200069 IP address blocks: 161.38.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f9:a7:86:1f:51:42:ae:b5:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590b174f-a815-4e24-9512-3236e7727928 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=a87b3b96-881f-436e-bba9-e7dc0ecf420b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:eb:b9:e5:48:e0:f5:d3:df:f7:9e:40:81:7d: ec:21:19:84:45:d0:a9:6b:44:5f:3e:90:bd:64:ca: ef:3c:bb:4e:98:ee:d0:fa:2e:24:87:fd:af:1a:d8: 88:67:58:a4:d5:c4:bd:bb:39:84:a5:af:cd:87:97: ee:b9:d6:a0:69:b9:54:c2:2b:27:c4:92:c1:18:16: 52:6f:51:e7:be:66:a8:b2:e7:6b:be:7c:c8:5f:6a: da:c4:f1:cd:2f:4c:6f:56:e7:a5:17:c8:c1:67:26: 57:a9:b8:93:17:87:ed:74:80:f3:e8:6b:35:c5:10: 94:4a:a0:27:64:11:9e:7f:30:4b:9b:57:65:f1:c1: f7:ff:6e:a1:26:80:0a:be:49:f7:ab:31:d8:b5:11: 7f:15:be:75:78:83:fe:b6:e4:28:3d:11:2c:61:ab: 60:d7:a4:04:bb:66:ce:c2:cf:d3:3b:11:2e:61:7a: 0b:7f:f6:6e:bd:f7:14:b6:e5:56:13:b4:22:dc:7f: 7e:6c:ef:81:a9:25:96:f5:91:73:22:19:30:89:b5: 7d:c9:f9:97:d4:8d:19:83:ac:d2:25:6f:89:63:30: 57:1c:a3:03:b6:dc:ac:b2:a8:69:3c:8e:ed:ad:1c: c7:58:31:5c:8e:5c:a0:f9:e9:85:d9:12:dc:b0:c9: e0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:36:AB:4F:38:CA:87:73:95:A6:0E:FD:5B:F2:C5:16:05:B1:17:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/1d45399d-9ebd-3de3-9494-ccd7005e822f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl X509v3 Authority Key Identifier: keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer sbgp-ipAddrBlock: critical IPv4: 161.38.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:aa:46:97:d5:da:af:89:70:bd:15:25:b9:72:65:b1:99:6e: a2:50:b6:18:ef:ed:7a:53:d4:38:62:e3:c2:5d:ca:22:ff:1f: 1e:26:84:f8:3c:9a:5a:94:bc:08:f0:b3:dc:b7:9c:3a:44:16: 71:d2:ab:4f:14:cf:65:db:db:36:3f:68:86:12:3b:d5:a5:9b: cb:07:22:ef:26:60:21:c0:00:05:cc:21:85:ef:9a:a4:b2:1b: 2c:f2:bd:f5:cd:93:f3:9c:9c:96:15:e6:27:34:f1:4f:05:32: cd:d3:4e:45:45:93:51:c7:4d:33:a6:19:34:4b:e9:5e:2a:41: f3:c2:e1:00:fb:9c:2a:7c:db:a8:29:94:11:3a:39:10:b9:38: 6a:a0:84:37:86:d3:5c:bb:5a:45:01:85:2a:f7:0f:d6:17:f0: 3b:82:42:5c:45:5f:4b:25:9b:50:04:26:e2:06:ce:f3:d1:47: 26:6c:cf:1b:1b:51:49:b2:1b:31:16:d1:91:de:49:be:a9:e7: e1:32:3f:da:46:ec:82:ff:57:e6:50:d6:65:d6:2b:10:0e:c6: fd:37:63:b2:be:bf:f0:05:50:72:e6:12:fd:99:07:87:59:33: c3:1a:d7:cf:67:8f:58:3e:d3:fe:fa:d8:b9:4f:e4:b8:45:04: 55:53:57:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPmnhh9RQq61uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwYjE3NGYtYTgxNS00ZTI0LTk1MTItMzIzNmU3NzI3 OTI4MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk YTg3YjNiOTYtODgxZi00MzZlLWJiYTktZTdkYzBlY2Y0MjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieu55Ujg9dPf955AgX3sIRmERdCpa0RfPpC9 ZMrvPLtOmO7Q+i4kh/2vGtiIZ1ik1cS9uzmEpa/Nh5fuudagablUwisnxJLBGBZS b1HnvmaosudrvnzIX2raxPHNL0xvVuelF8jBZyZXqbiTF4ftdIDz6Gs1xRCUSqAn ZBGefzBLm1dl8cH3/26hJoAKvkn3qzHYtRF/Fb51eIP+tuQoPREsYatg16QEu2bO ws/TOxEuYXoLf/ZuvfcUtuVWE7Qi3H9+bO+BqSWW9ZFzIhkwibV9yfmX1I0Zg6zS JW+JYzBXHKMDttyssqhpPI7trRzHWDFcjlyg+emF2RLcsMngDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs2q084yodzlaYO/VvyxRYFsRepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBi MTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2ZTc3Mjc5MjgvMWQ0NTM5OWQtOWViZC0z ZGUzLTk0OTQtY2NkNzAwNWU4MjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwYjE3NGYtYTgxNS00ZTI0LTk1 MTItMzIzNmU3NzI3OTI4LzU5MGIxNzRmLWE4MTUtNGUyNC05NTEyLTMyMzZlNzcy NzkyOC5jcmwwHwYDVR0jBBgwFoAU2F3FhgdSdaU3Kr9Z00T17JQBC5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTBiMTc0Zi1hODE1LTRlMjQtOTUxMi0zMjM2 ZTc3Mjc5MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoSbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOqRpfV2q+JcL0VJblyZbGZbqJQthjv7XpT1Dhi48JdyiL/Hx4mhPg8 mlqUvAjws9y3nDpEFnHSq08Uz2Xb2zY/aIYSO9Wlm8sHIu8mYCHAAAXMIYXvmqSy GyzyvfXNk/OcnJYV5ic08U8FMs3TTkVFk1HHTTOmGTRL6V4qQfPC4QD7nCp826gp lBE6ORC5OGqghDeG01y7WkUBhSr3D9YX8DuCQlxFX0slm1AEJuIGzvPRRyZszxsb UUmyGzEW0ZHeSb6p5+EyP9pG7IL/V+ZQ1mXWKxAOxv03Y7K+v/AFUHLmEv2ZB4dZ M8Ma189nj1g+0/762LlP5LhFBFVTV1c= -----END CERTIFICATE-----Generated at Tue Mar 24 10:20:39 2026 by rpki-client